[Mono-list] Bug in signcode? (Corrupts PE checksum)

JoelKatz davids at webmaster.com
Sat Nov 14 13:02:06 EST 2009



Sebastien Pouliot-2 wrote:
> 
> 
> The field was left empty because it was not required for verifying the
> authenticode integrity. In fact it's not commonly checked afaik. Is this
> causing you a problem somewhere ?
> 
> In this case patches would be welcome :-) Otherwise please open a bug
> report (as an enhancement) on bugzilla.novell.com so I don't forget
> about this issue next time I go around fixing those parts.
> 
> 

In our case, it was a check done to make sure the executable hadn't been
damaged or corrupted in transport. That code was not sophisticated enough to
understand a signature.

I'm not sure this can fairly be categorized as an enhancement request. The
Mono tool leaves the checksum invalid and the corresponding Microsoft tools
correct the checksum (or zero it, I actually didn't specifically check
which).

Zero is a perfectly valid PE checksum value, and it indicates that no
checksum is present. Having the Mono tool zero the checksum would solve my
issue.

DS

-- 
View this message in context: http://old.nabble.com/Bug-in-signcode--%28Corrupts-PE-checksum%29-tp26325662p26351942.html
Sent from the Mono - General mailing list archive at Nabble.com.



More information about the Mono-list mailing list